4d4de9714a1d888f6070d676363518ae

General

Target
4d4de9714a1d888f6070d676363518ae
Size 265KB
Sample220714-hr4t8aecd7
SHA256 c4e4941b22293175166737686128c2fa6c51781f1434253df4e0624ecf96a802
MD5 4d4de9714a1d888f6070d676363518ae
SHA1 14b8151cc8c38d16a177aaeb3e633b8c68b41ad3
SHA512 cda06c66360448f1a21de72c0e10dd011e75b8945d1cf759dc69aa14124132a824b136dc092c79cf4fc3fa6a628bd0e858cb525bb7a0762a38d40ee179f7dc1d
SSDEEP 6144:XYAhJnH2ezk/t1EPi88gjdWgQiVSoW8aB:XYA7WUk/t1T8JprS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

4d4de9714a1d888f6070d676363518ae

.exe 265KB

4d4de9714a1d888f6070d676363518ae

IMPHASH 8098e148e55b22e8d4608c3cad42db52
SHA256 c4e4941b22293175166737686128c2fa6c51781f1434253df4e0624ecf96a802
MD5 4d4de9714a1d888f6070d676363518ae
SHA1 14b8151cc8c38d16a177aaeb3e633b8c68b41ad3
SHA512 cda06c66360448f1a21de72c0e10dd011e75b8945d1cf759dc69aa14124132a824b136dc092c79cf4fc3fa6a628bd0e858cb525bb7a0762a38d40ee179f7dc1d
SSDEEP 6144:XYAhJnH2ezk/t1EPi88gjdWgQiVSoW8aB:XYA7WUk/t1T8JprS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

59744

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstChangeNotificationA GetNamedPipeHandleStateW GetOverlappedResult FillConsoleOutputCharacterW GetQueuedCompletionStatus TerminateProcess GetCurrentProcessId FindNextFileA CopyFileExA BuildCommDCBAndTimeoutsA EnumDateFormatsA GetVersionExW VirtualLock WriteProfileStringW VerifyVersionInfoA GetProcessPriorityBoost FindFirstChangeNotificationW GetPriorityClass GetCompressedFileSizeW FindNextVolumeMountPointW OutputDebugStringW GetWriteWatch WriteConsoleInputA GetConsoleTitleA SetComputerNameExW GetTimeZoneInformation LoadLibraryW GetSystemDirectoryW GetDriveTypeA GetModuleHandleA GlobalAlloc GetShortPathNameA ZombifyActCtx GetProfileSectionA DeleteFileW GetCommandLineW ReleaseActCtx FindResourceA FormatMessageA GetModuleFileNameA CreateJobObjectW EnterCriticalSection SetFirmwareEnvironmentVariableA GetDllDirectoryA GetExitCodeThread LoadLibraryA WritePrivateProfileStringA GetConsoleAliasesLengthW WriteProfileSectionA InterlockedDecrement AddAtomA UpdateResourceW GetVersionExA HeapValidate _hwrite InterlockedExchangeAdd GetStartupInfoW GetConsoleAliasExesA DebugBreak EndUpdateResourceA GetLastError GetCPInfoExA GetSystemWow64DirectoryW DisconnectNamedPipe GetStringTypeExW DeleteVolumeMountPointA FatalAppExitA SetSystemTime OpenFileMappingW lstrcmpA SetConsoleCursorPosition SetDefaultCommConfigW GetACP GetCurrencyFormatA CreateActCtxW GetTapeParameters GetMailslotInfo GetConsoleAliasW _lwrite GetDiskFreeSpaceExA DefineDosDeviceW GetAtomNameA FlushConsoleInputBuffer EnumResourceTypesA lstrlenW GetLongPathNameW CreateJobSet WriteConsoleW VirtualProtect ReadConsoleOutputW SuspendThread BuildCommDCBW FoldStringA GetHandleInformation GetComputerNameW WritePrivateProfileSectionA WritePrivateProfileStructA TryEnterCriticalSection GetPrivateProfileSectionNamesA CopyFileW GetVolumePathNameA SetConsoleMode HeapWalk FindNextFileW ResetEvent ReadProcessMemory GetProcAddress ChangeTimerQueueTimer WriteConsoleInputW InterlockedCompareExchange MoveFileA GetCommMask SetFileShortNameA VerLanguageNameA FreeEnvironmentStringsA EnumDateFormatsExW GetSystemWindowsDirectoryW GetProfileStringA GlobalGetAtomNameW GetConsoleAliasesA CreateMailslotW SetConsoleOutputCP MoveFileWithProgressW GetFileInformationByHandle GetLocalTime FoldStringW CallNamedPipeW GetConsoleAliasExesLengthA CopyFileExW OpenSemaphoreA GetPrivateProfileIntA GetModuleHandleExW WriteConsoleOutputCharacterW SetComputerNameW FindActCtxSectionStringW GetTickCount FreeLibraryAndExitThread GetUserDefaultLangID LocalLock FindFirstVolumeW FindClose OpenWaitableTimerA EnumResourceNamesA OpenFileMappingA GetFileType QueueUserWorkItem RaiseException lstrcpynW GetFullPathNameA SetThreadPriority ReadConsoleA AssignProcessToJobObject CreateFileW GetDateFormatA DeactivateActCtx GetConsoleAliasExesW SetCurrentDirectoryW GetFileAttributesA GetBinaryTypeW SetCalendarInfoA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetModuleHandleW ExitProcess DeleteFileA IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError GetStdHandle WriteFile OutputDebugStringA GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount QueryPerformanceCounter GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStartupInfoA HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA

Name

.text

Size

176KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

69KB

Virtual Size

41.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.yiyar

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xavo

Size

512B

Virtual Size

75B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.retiras

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4d4de9714a1d888f6070d676363518ae

kernel32